
$ rpki-client -vvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa
File: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (raw, json)
Hash identifier: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=
Subject key identifier: AE:6E:61:BD:FD:89:B8:0B:A5:5F:20:DE:84:3E:EC:4A:45:9E:C4:6A
Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244
Certificate serial: A9A525EA472977D65AB8AA5347560E4B540B3D
Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa
Signing time: Sun 03 May 2026 02:12:04 +0000
ROA not before: Sun 03 May 2026 02:07:04 +0000
ROA not after: Sun 02 May 2027 02:12:04 +0000
asID: 136841
IP address blocks: 103.100.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl
rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a9:a5:25:ea:47:29:77:d6:5a:b8:aa:53:47:56:0e:4b:54:0b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244
Validity
Not Before: May 3 02:07:04 2026 GMT
Not After : May 2 02:12:04 2027 GMT
Subject: CN=AE6E61BDFD89B80BA55F20DE843EEC4A459EC46A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:90:6f:49:5f:3c:68:2b:d4:cd:a9:85:9d:
0b:11:3c:bb:e0:d6:04:46:8f:24:36:44:39:c7:79:
0f:c8:cf:b6:ca:1c:45:9b:d2:92:2d:a4:62:b7:00:
0e:a6:96:e9:3c:22:3e:02:de:c6:8c:b7:84:88:f8:
96:32:68:b1:78:16:55:f3:29:68:64:15:7c:df:16:
fc:3f:f7:7f:40:ca:9d:77:53:9c:8e:f8:d6:04:4d:
9d:cb:db:97:10:e9:0e:8d:4f:07:68:6f:5c:9c:e9:
3d:bd:22:9c:81:24:4e:a6:28:80:fb:da:40:18:de:
24:bd:b0:d7:8f:dc:a6:a4:2d:f1:f6:db:90:c5:ac:
ab:9b:05:e8:a6:b2:a5:d4:73:a6:1e:a6:66:6e:e9:
fe:38:83:66:8e:ac:fa:10:a8:be:df:ba:ed:25:24:
4b:b2:d4:36:6b:ed:48:a8:20:9e:0e:bf:87:cc:78:
b3:9a:43:be:db:7e:e7:25:f1:e3:1a:59:93:05:4f:
e6:0a:75:6c:1e:3d:85:6e:da:f3:a1:ef:09:11:c9:
a8:cd:bb:35:a3:a4:29:01:24:22:ef:dc:94:00:a7:
13:e8:43:0a:9b:16:8b:42:77:39:f3:b8:2f:b1:51:
c3:ae:74:dc:2e:d6:b9:66:71:93:6f:0a:c5:ef:e6:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:61:BD:FD:89:B8:0B:A5:5F:20:DE:84:3E:EC:4A:45:9E:C4:6A
X509v3 Authority Key Identifier:
keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.173.0/24
Signature Algorithm: sha256WithRSAEncryption
73:67:c3:bf:86:84:44:c3:b1:e5:16:b2:50:0b:57:a9:aa:a6:
a6:53:4e:b7:0d:cc:61:50:15:49:ef:93:5b:40:ed:3b:22:cc:
34:e8:b4:ef:8c:17:09:7e:c3:2c:90:6e:03:01:d8:dc:93:44:
66:56:fe:4d:bc:31:19:8b:14:3b:aa:ae:ba:8b:f1:80:a9:8f:
5f:9e:e3:3e:ed:08:a1:17:d1:57:f4:65:8f:67:bc:bb:d8:46:
ab:17:0f:94:d3:67:b2:07:21:ef:aa:cf:83:1d:b5:84:bb:7f:
20:fe:9c:af:6a:24:52:c9:e0:28:a9:34:c3:0b:05:1d:68:86:
0f:23:ce:12:c7:0b:a8:fc:92:ee:71:4a:47:69:3a:93:08:40:
42:be:be:e0:f3:22:09:0e:40:01:9b:a4:be:0f:02:14:1f:0a:
36:d7:55:87:46:b0:01:3e:4c:01:d6:2c:a5:6e:b4:44:0b:a8:
8b:b2:cf:a4:93:19:09:34:c2:dd:8f:99:6f:17:c1:65:cf:46:
78:d5:8a:19:5f:93:1b:ed:96:d9:b8:cc:e8:7b:ec:82:2f:25:
92:08:d5:b8:d0:18:80:ad:fe:99:a3:db:12:3c:97:35:d0:00:
73:c2:29:9e:a7:e4:1f:bb:05:15:55:a7:0f:1c:b1:be:db:71:
66:66:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:16 2026 by rpki-client